Skip to content

fix(deps): update ai sdk ecosystem (major) - #240

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/major-ai-sdk-ecosystem
Open

fix(deps): update ai sdk ecosystem (major)#240
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/major-ai-sdk-ecosystem

Conversation

@renovate

@renovate renovate Bot commented Jun 27, 2026

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
@ai-sdk/anthropic (source) ^3.0.0^4.0.0 age confidence
@ai-sdk/anthropic (source) ^3.0.0^3.0.0 || ^4.0.0 age confidence
@ai-sdk/deepseek (source) ^2.0.0^3.0.0 age confidence
@ai-sdk/deepseek (source) ^2.0.0^2.0.0 || ^3.0.0 age confidence
@ai-sdk/google (source) ^3.0.0^4.0.0 age confidence
@ai-sdk/google (source) ^3.0.0^3.0.0 || ^4.0.0 age confidence
@ai-sdk/groq (source) ^3.0.0^4.0.0 age confidence
@ai-sdk/groq (source) ^3.0.0^3.0.0 || ^4.0.0 age confidence
@ai-sdk/openai (source) ^3.0.0^4.0.0 age confidence
@ai-sdk/openai (source) ^3.0.0^3.0.0 || ^4.0.0 age confidence
@ai-sdk/openai-compatible (source) ^2.0.0^2.0.0 || ^3.0.0 age confidence
@ai-sdk/openai-compatible (source) ^2.0.0^3.0.0 age confidence
@ai-sdk/provider (source) ^3.0.8^4.0.0 age confidence
@ai-sdk/rsc (source) ^2.0.0^3.0.0 age confidence
@ai-sdk/xai (source) ^3.0.0^3.0.0 || ^4.0.0 age confidence
@ai-sdk/xai (source) ^3.0.0^4.0.0 age confidence
@openrouter/ai-sdk-provider ^2.3.3^3.0.0 age confidence
ai (source) ^6.0.138^7.0.0 age confidence
ai (source) ^6.0.0^6.0.0 || ^7.0.0 age confidence

Release Notes

vercel/ai (@​ai-sdk/anthropic)

v4.0.40

Compare Source

Patch Changes

v4.0.39

Patch Changes
  • 4579b08: Preserve Anthropic server-tool caller metadata in multi-turn conversations.

v4.0.38

Patch Changes

v4.0.37

Compare Source

Patch Changes

v4.0.36

Compare Source

Patch Changes

v4.0.35

Compare Source

Patch Changes

v4.0.34

Compare Source

Patch Changes
  • e6415bd: feat(anthropic): add text batch support

v4.0.33

Compare Source

Patch Changes

v4.0.32

Compare Source

Patch Changes
  • 8b96941: Reject spliced Anthropic generations while allowing duplicate message start events for the active message.

v4.0.30

Compare Source

Patch Changes

v4.0.29

Compare Source

Patch Changes

v4.0.28

Compare Source

Patch Changes

v4.0.27

Compare Source

Patch Changes

v4.0.26

Compare Source

Patch Changes

v4.0.25

Compare Source

Patch Changes

v4.0.24

Compare Source

Patch Changes

v4.0.23

Compare Source

Patch Changes

v4.0.22

Compare Source

Patch Changes

v4.0.21

Compare Source

Patch Changes
  • e29788d: fix(anthropic): report thinking tokens as reasoning token usage

v4.0.20

Compare Source

Patch Changes
  • cbdc990: feat (provider/anthropic): support fallbacks 'default' mode, which routes safety classifier refusals to Anthropic's recommended fallback model (adds the server-side-fallback-2026-07-01 beta automatically)
  • cbdc990: feat (provider/anthropic): support mid-conversation tool changes via the toolChanges system message provider option, emitting tool_addition/tool_removal content blocks and the mid-conversation-tool-changes-2026-07-01 beta
  • cbdc990: feat (provider/anthropic): add claude-opus-5 model id with frontier-tier capabilities (128k output tokens, structured output, adaptive thinking, xhigh effort, sampling parameter rejection, thinking-disabled only at effort high or below)

v4.0.19

Patch Changes
  • 01a596a: fix (provider/anthropic): use current-generation capability defaults for unrecognized Claude model IDs while retaining conservative defaults for legacy Claude and non-Claude models.

v4.0.18

Patch Changes
  • 97de198: Warn when an unknown model uses the default 4096 max output token limit.

v4.0.17

Compare Source

Patch Changes
  • b72fc7c: fix(amazon-bedrock): sanitize unsupported JSON Schema constraints in native Anthropic structured output
  • 9218ebe: fix(provider/anthropic): warn when parallel tool use is requested with JSON tool structured output
  • Updated dependencies [02ffdcb]
  • Updated dependencies [76cb673]

v4.0.16

Compare Source

Patch Changes

v4.0.15

Compare Source

Patch Changes

v4.0.14

Compare Source

Patch Changes
  • 4be62c1: fix(provider-utils): validate provider-response URLs in getFromApi

    getFromApi now has a validateUrl flag. It is optional so existing callers keep compiling (omitting it behaves like false, i.e. no validation), but all AI SDK provider packages set it explicitly at every call site so each one makes a visible trust decision. When true, the URL is routed through fetchWithValidatedRedirects — the same guard used by downloadBlob — which rejects private/loopback/link-local targets, re-validates every redirect hop, strips proxy/metadata/cookie request headers, and drops all caller headers except the user-agent on cross-origin redirects (custom API-key headers must not follow a redirect off-origin any more than Authorization may); blocked URLs throw DownloadError. It is enabled at the image/video/audio download and polling call sites where the URL comes from a provider response body; URLs built from developer-configured endpoints pass validateUrl: false and are unaffected.

    A new optional credentialedOrigin withholds caller headers unless the URL is same-origin with it, so the API key is not sent to a response-supplied host on a different origin.

    A new optional trustedOrigin exempts URLs (and redirect hops) that are same-origin with the developer-configured provider endpoint from target validation, so self-hosted and localhost deployments whose response URLs point back at the configured host keep working; all other hops are still validated.

    Also closes range gaps in validateDownloadUrl (IPv4 224.0.0.0/4 multicast and the TEST-NET documentation ranges 192.0.2.0/24, 198.51.100.0/24, 203.0.113.0/24; IPv6 documentation ranges 2001:db8::/32 and 3fff::/20), and follows only the fetch-spec redirect status codes (301/302/303/307/308) — a Location header on any other status is not followed. This guard performs string/literal checks only and does not resolve DNS; hostnames that resolve to private addresses and DNS rebinding remain out of scope and must be constrained at the network layer (or by injecting a Node fetch that pins the resolved IP at connect time) for server deployments handling untrusted URLs. See contributing/secure-url-handling.md.

  • cd12954: Reject empty OpenAI, Anthropic, and Replicate base URLs with a helpful AI SDK
    invalid argument error.

  • Updated dependencies [4be62c1]

  • Updated dependencies [7805e4a]

  • Updated dependencies [cd12954]

v4.0.12

Compare Source

Patch Changes
  • 308a519: chore: enforce consistent imports from zod/v4 instead of zod

v4.0.11

Compare Source

Patch Changes

v4.0.10

Compare Source

Patch Changes

v4.0.9

Compare Source

Patch Changes
  • 2e45d9c: fix(anthropic): wrap invalid tool input in object

v4.0.8

Compare Source

Patch Changes
  • 0aa0ff3: fix(anthropic): forward thinking: { type: 'disabled' } to the API instead of stripping it

    Previously, setting providerOptions.anthropic.thinking = { type: 'disabled' } (or top-level reasoning: 'none') was accepted by the schema but silently dropped from the outgoing request. For models that default thinking on (e.g. Sonnet 5), this left thinking enabled and could consume a small max_tokens budget entirely. The disabled value is now sent to the Anthropic Messages API.

v4.0.7

Compare Source

Patch Changes

v4.0.6

Compare Source

Patch Changes
  • c6f5e62: Prevent prototype pollution when synchronously parsing provider JSON inputs and expose secureJsonParse from provider-utils.
  • 679c52a: Normalize a bare https://api.anthropic.com base URL to include /v1.
  • Updated dependencies [c6f5e62]

v4.0.5

Compare Source

Patch Changes

v4.0.4

Compare Source

Patch Changes
  • c18018c: feat (provider/anthropic): add claude-sonnet-5 model id

v4.0.3

Compare Source

Patch Changes

v4.0.2

Compare Source

Patch Changes
  • dfffb27: fix(anthropic): correctly map delta type when code execution tools are used

v4.0.1

Compare Source

Patch Changes

v4.0.0

Compare Source

Major Changes
  • 832f86f: fix(anthropic): remove cacheCreationInputTokens from providerMetadata

  • 34bd95d: feat(ai): add support for uploading provider skills using the provider references abstraction

  • ef992f8: Remove CommonJS exports from all packages. All packages are now ESM-only ("type": "module"). Consumers using require() must switch to ESM import syntax.

  • c29a26f: feat(provider): add support for provider references and uploading files as supported per provider

  • 3887c70: feat(provider): add new top-level reasoning parameter to spec and support it in generateText and streamText

  • 8359612: Start v7 pre-release

  • 04e9009: chore: make provider implementations code patterns more consistent, including renaming certain exported symbols

    For all externally exported symbols that were renamed, the old names continue to work via deprecated aliases.

Patch Changes
  • e02f041: feat(provider/anthropic): add support for claude-opus-4-8

  • 648705c: fix(provider/anthropic): fix remaining errors with Anthropic code_execution tool dynamic calls from latest web_fetch or web_search

  • 38fc777: Add AI Gateway hint to provider READMEs

  • ee798eb: chore(provider-utils): rename Experimental_Sandbox to Experimental_SandboxSession

  • e748b35: chore: update v3 specs to v4

  • 19c5ee2: fix(anthropic): reorder assistant content b/w client and provider tool use

  • 0ee8aec: feat (provider/anthropic): support passing metadata.user_id

  • c012d57: feat(anthropic): sanitize the unsupported JSON schema validation properties

  • 8018480: feat(anthropic): add the new advisor tool

  • e5c4f40: Remove stale effort-2025-11-24 beta header — the extended thinking effort parameter is GA and no longer requires the beta flag. Vertex AI's strict validator was actively rejecting requests with this header.

  • f57c702: fix(anthropic): allow both temperature and topP for non-Anthropic models using the Anthropic-compatible API

    The temperature/topP mutual exclusivity check now only applies to known Anthropic models (model IDs starting with claude-). Non-Anthropic models using the Anthropic-compatible API (e.g. Minimax) can now send both parameters as required by their APIs.

  • 2610e84: feat(provider/anthropic): automatically use sandbox in bash tool

  • d848405: feat: add optional abortSignal parameters to sandbox command execution

  • 87d1723: chore(anthropic): remove unnecessary messages affix from Anthropic symbols and files

  • 9f0e36c: trigger release for all packages after provenance setup

  • acdbf84: Handle errors from anthropic websearch tool

  • ad0b376: fix(provider/anthropic): stop adding fine-grained-tool-streaming-2025-05-14 beta for claude-opus-4-7

  • 58a2ad7: fix: more precise default message for tool execution denial

  • 21d1ee3: fix(anthropic): skip passing beta header for tool search tools

  • 1fe058b: fix(anthropic): preserve the error code returned by model

  • 7fc6bd6: Raise minimum supported Node.js version to 22. Supported versions: 22, 24, and 26.

  • 09bd27b: feat (provider/anthropic): add support for inference_geo provider option

  • 0c4c275: trigger initial canary release

  • 6fd51c0: fix(provider): preserve error type prefix in getErrorMessage

  • e311194: feat(ai): allow passing provider instance to uploadFile and uploadSkill as shorthand

  • 6c93e36: feat(provider-utils): add spawnCommand method to Experimental_Sandbox to allow for detached command execution

  • 9bd6512: feat(provider): change file part data property to be tagged with a type and remove the image part type

  • 258c093: chore: ensure consistent import handling and avoid import duplicates or cycles

  • 5463d0d: feat(provider): align tool result output content file part types with top-level message file part types

  • b8396f0: trigger initial beta release

  • 6b4d325: feat(provider/anthropic): add support for claude-fable-5 and the fallbacks API parameter

  • f05a40d: fix(vertex): throw warning when strict: true for vertexAnthropic

  • a6617c5: feat(provider-utils): add readFile and writeFile plus convenience wrappers to Experimental_Sandbox abstraction

  • a464505: fix(anthropic): propagate toModelOutput providerOption to anthropic tool results

  • 90e2d8a: chore: fix unused vars not being flagged by our lint tooling

  • b3976a2: Add workflow serialization support to all provider models.

    @ai-sdk/provider-utils: New serializeModel() helper that extracts only serializable properties from a model instance, filtering out functions and objects containing functions. Third-party provider authors can use this to add workflow support to their own models.

    All providers: headers is now optional in provider config types. This is non-breaking — existing code that passes headers continues to work. Custom provider implementations that construct model configs manually can now omit headers, which is useful when models are deserialized from a workflow step boundary where auth is provided separately.

    All provider model classes now include WORKFLOW_SERIALIZE and WORKFLOW_DESERIALIZE static methods, enabling them to cross workflow step boundaries without serialization errors.

  • 0d8f107: feat(provider/anthropic): add support for Opus 4.7 and relevant API enhancements

  • ff5eba1: feat: roll image-* tool output types into their equivalent file-* types

v3.0.111

Compare Source

Patch Changes

v3.0.110

Compare Source

Patch Changes

v3.0.109

Compare Source

Patch Changes

v3.0.108

Compare Source

Patch Changes

v3.0.107

Compare Source

Patch Changes

v3.0.105

Compare Source

Patch Changes
  • 0a295e3: Preserve Anthropic prompt-cache matches by replaying complete code-execution transcripts in their original wire shape.

v3.0.104

Compare Source

Patch Changes

v3.0.103

Compare Source

Patch Changes
  • 7865a71: fix(anthropic): report thinking tokens as reasoning token usage

v3.0.102

Compare Source

Patch Changes
  • b4c4426: feat (provider/anthropic): support fallbacks 'default' mode, which routes safety classifier refusals to Anthropic's recommended fallback model (adds the server-side-fallback-2026-07-01 beta automatically)
  • b4c4426: feat (provider/anthropic): support mid-conversation tool changes via the toolChanges system message provider option, emitting tool_addition/tool_removal content blocks and the mid-conversation-tool-changes-2026-07-01 beta
  • b4c4426: feat (provider/anthropic): add claude-opus-5 model id with frontier-tier capabilities (128k output tokens, structured output, adaptive thinking, xhigh effort, sampling parameter rejection, thinking-disabled only at effort high or below)

v3.0.101

Compare Source

Patch Changes
  • 0608dca: fix (provider/anthropic): use current-generation capability defaults for unrecognized Claude model IDs while retaining conservative defaults for legacy Claude and non-Claude models.

v3.0.100

Compare Source

Patch Changes
  • b7afc80: Warn when an unknown model uses the default 4096 max output token limit.

v3.0.99

Compare Source

Patch Changes
  • db8cff6: fix(amazon-bedrock): sanitize unsupported JSON Schema constraints in native Anthropic structured output
  • 94d0f86: fix(provider/anthropic): warn when parallel tool use is requested with JSON tool structured output

v3.0.98

Compare Source

Patch Changes

v3.0.97

Compare Source

Patch Changes

v3.0.96

Compare Source

v3.0.95

Compare Source

v3.0.94

Compare Source

Patch Changes
  • 0952964: Prevent prototype pollution when synchronously parsing provider JSON inputs and expose secureJsonParse from provider-utils.
  • 764baab: Normalize a bare https://api.anthropic.com base URL to include /v1.
  • Updated dependencies [0952964]

v3.0.93

Compare Source

v3.0.92

Compare Source

Patch Changes

v3.0.91

Compare Source

Patch Changes

v3.0.90

Compare Source

Patch Changes
  • 28ff5a7: fix(anthropic): correctly map delta type when code execution tools are used

v3.0.89

Compare Source

Patch Changes

v3.0.88

Compare Source

Patch Changes

v3.0.87

Compare Source

Patch Changes

v3.0.86

Compare Source

Patch Changes
  • 6086c60: fix(anthropic): reorder assistant content b/w client and provider tool use

v3.0.85

Compare Source

Patch Changes

v3.0.84

Patch Changes

v3.0.82

Compare Source

Patch Changes
  • 2a91a17: feat(provider/anthropic): add support for claude-fable-5 and the fallbacks API parameter

v3.0.81

Compare Source

Patch Changes
  • 4084fcd: feat(provider/anthropic): add support for claude-opus-4-8

v3.0.80

Compare Source

Patch Changes
  • 263d3e6: fix(provider/anthropic): fix remaining errors with Anthropic code_execution tool dynamic calls from latest web_fetch or web_search

v3.0.79

Compare Source

Patch Changes
  • d61a788: Handle errors from anthropic websearch tool

v3.0.78

Compare Source

Patch Changes
  • 6e28d25: fix(anthropic): propagate toModelOutput providerOption to anthropic tool results

v3.0.77

Compare Source

Patch Changes
  • d53314d: feat(anthropic): add the new advisor tool

v3.0.76

Compare Source

Patch Changes

v3.0.75

Compare Source

Patch Changes
  • 3f06680: Remove stale effort-2025-11-24 beta header — the extended thinking effort parameter is GA and no longer requires the beta flag. Vertex AI's strict validator was actively rejecting requests with this header.

v3.0.74

Compare Source

Patch Changes

v3.0.73

Compare Source

Patch Changes

v3.0.72

Compare Source

Patch Changes
vercel/ai (@​ai-sdk/deepseek)

v3.0.29

Patch Changes
  • e6087c9: fix: handle empty string tool call

Note

PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "every weekend"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from a team June 27, 2026 02:11
@vercel

vercel Bot commented Jun 27, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
ai-billing-storybook Error Error Aug 20, 2026 9:08pm

Request Review

@codecov

codecov Bot commented Jun 27, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@renovate
renovate Bot force-pushed the renovate/major-ai-sdk-ecosystem branch from 6946bea to 6f20d13 Compare June 27, 2026 22:03
@renovate
renovate Bot force-pushed the renovate/major-ai-sdk-ecosystem branch from 6f20d13 to 433a914 Compare June 29, 2026 19:55
@renovate
renovate Bot force-pushed the renovate/major-ai-sdk-ecosystem branch from 433a914 to 95c0720 Compare June 30, 2026 03:54
@renovate
renovate Bot force-pushed the renovate/major-ai-sdk-ecosystem branch from 95c0720 to f0c3a1f Compare June 30, 2026 06:11
@renovate
renovate Bot force-pushed the renovate/major-ai-sdk-ecosystem branch from f0c3a1f to a10937d Compare June 30, 2026 20:34
@renovate
renovate Bot force-pushed the renovate/major-ai-sdk-ecosystem branch from a10937d to 3f39365 Compare July 1, 2026 20:43
@renovate
renovate Bot force-pushed the renovate/major-ai-sdk-ecosystem branch from 3f39365 to 6c03130 Compare July 2, 2026 03:44
@renovate
renovate Bot force-pushed the renovate/major-ai-sdk-ecosystem branch from 6c03130 to e44e665 Compare July 2, 2026 22:17
@renovate
renovate Bot force-pushed the renovate/major-ai-sdk-ecosystem branch from e44e665 to 083fece Compare July 4, 2026 09:03
@renovate
renovate Bot force-pushed the renovate/major-ai-sdk-ecosystem branch from 083fece to 03fae85 Compare July 6, 2026 02:57
@renovate
renovate Bot force-pushed the renovate/major-ai-sdk-ecosystem branch from 03fae85 to 7772ba0 Compare July 6, 2026 16:58
@renovate
renovate Bot force-pushed the renovate/major-ai-sdk-ecosystem branch from 84af816 to 5e21306 Compare July 10, 2026 23:07
@renovate
renovate Bot force-pushed the renovate/major-ai-sdk-ecosystem branch from 5e21306 to 895318f Compare July 11, 2026 21:43
@renovate
renovate Bot force-pushed the renovate/major-ai-sdk-ecosystem branch from 895318f to 81d0b94 Compare July 13, 2026 18:51
@renovate
renovate Bot force-pushed the renovate/major-ai-sdk-ecosystem branch from 81d0b94 to b8fcdc2 Compare July 14, 2026 00:01
@renovate
renovate Bot force-pushed the renovate/major-ai-sdk-ecosystem branch from b8fcdc2 to 991d763 Compare July 14, 2026 19:34
@renovate
renovate Bot force-pushed the renovate/major-ai-sdk-ecosystem branch from 991d763 to 34f390b Compare July 14, 2026 22:38
@renovate
renovate Bot force-pushed the renovate/major-ai-sdk-ecosystem branch from 34f390b to 835ead4 Compare July 15, 2026 18:53
@renovate
renovate Bot force-pushed the renovate/major-ai-sdk-ecosystem branch from 835ead4 to 0825c13 Compare July 15, 2026 20:56
@renovate
renovate Bot force-pushed the renovate/major-ai-sdk-ecosystem branch from 0825c13 to 1815bec Compare July 17, 2026 08:41
@renovate
renovate Bot force-pushed the renovate/major-ai-sdk-ecosystem branch from 1815bec to 6edb702 Compare July 17, 2026 13:38
@renovate
renovate Bot force-pushed the renovate/major-ai-sdk-ecosystem branch from 6edb702 to 694787d Compare July 20, 2026 20:11
@renovate
renovate Bot force-pushed the renovate/major-ai-sdk-ecosystem branch from 694787d to b249891 Compare July 21, 2026 04:29
@renovate
renovate Bot force-pushed the renovate/major-ai-sdk-ecosystem branch from b249891 to 1db0b1c Compare July 21, 2026 12:51
@renovate
renovate Bot force-pushed the renovate/major-ai-sdk-ecosystem branch from 1db0b1c to c7188c1 Compare July 21, 2026 14:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants